CVE-2016-0300 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validat...
MediumCVSS 5.4
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tririga application platform | = 3.3.0.0 | No fix listed |
| ibm tririga application platform | = 3.3.0.1 | No fix listed |
| ibm tririga application platform | = 3.3.0.2 | No fix listed |
| ibm tririga application platform | = 3.3.1.0 | No fix listed |
| ibm tririga application platform | = 3.3.1.1 | No fix listed |
| ibm tririga application platform | = 3.3.1.2 | No fix listed |
| ibm tririga application platform | = 3.3.1.3 | No fix listed |
| ibm tririga application platform | = 3.3.2.0 | No fix listed |
| ibm tririga application platform | = 3.3.2.1 | No fix listed |
| ibm tririga application platform | = 3.3.2.3 | No fix listed |
| ibm tririga application platform | = 3.3.2.4 | No fix listed |
| ibm tririga application platform | = 3.3.2.5 | No fix listed |
| ibm tririga application platform | = 3.4.0.0 | No fix listed |
| ibm tririga application platform | = 3.4.1.1 | No fix listed |
| ibm tririga application platform | = 3.4.1.2 | No fix listed |
| ibm tririga application platform | = 3.4.1.3 | No fix listed |
| ibm tririga application platform | = 3.4.2.0 | No fix listed |
| ibm tririga application platform | = 3.4.2.1 | No fix listed |
| ibm tririga application platform | = 3.4.2.2 | No fix listed |
| ibm tririga application platform | = 3.5.0.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-tririga-cve20160300-sec-bypass(111412) vdb-entry vendor-advisory